GDPR Compliance Statement

Last updated: August 2026

Our Commitment to GDPR

grand-pebble is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This statement outlines how we handle personal data in accordance with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you provide explicit consent for us to process your data
Contractual necessity: When processing is necessary to perform our consulting services
Legitimate interests: When processing is necessary for our legitimate business purposes, balanced against your rights
Legal obligation: When we must process data to comply with legal requirements

Data Controller

grand-pebble acts as the data controller for personal information collected through this website and our consulting services.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you
Right to rectification: You can request correction of inaccurate or incomplete data
Right to erasure: You can request deletion of your personal data in certain circumstances
Right to restrict processing: You can request that we limit how we use your data
Right to data portability: You can request your data in a structured, commonly used format
Right to object: You can object to certain types of processing
Rights related to automated decision-making: You have rights relating to automated decisions

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or internal policy requirements.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. If this changes, we will ensure appropriate safeguards are in place.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, in accordance with GDPR requirements.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Please check this page periodically for updates.